Von: Lindenberg Email Test Service <*********@lindenberg.one>
Gesendet: 21.07.2023 17:55
An: <*********@lindenberg.one>
Cc: <*********@lindenberg.one>
Betreff: Test result for deutschebahn.com (tech.deutschebahn.com, deutschebahn.com)
Connection History:
2023-07-21 17:37:52 - 17:37:58 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 2, plain text, Connect):
From: <n***y@deutschebahn.com> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:37:58 - 17:38:03 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 2, plain text, Connect):
From: <n***y@deutschebahn.com> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:38:57 - 17:39:02 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 7, plain text, Connect):
From: <n***y@deutschebahn.com> To: <nr@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:45:02 - 17:45:02 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 2, plain text, Connect):
From: <n***y@deutschebahn.com> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:45:02 - 17:45:08 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 7, encrypted with TLS 1.2, Mail):
From: <n***y@deutschebahn.com> To: <nr@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:45:02 - 17:45:08 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 2, encrypted with TLS 1.2, Mail):
From: <n***y@deutschebahn.com> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:55:02 - 17:55:08 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 2, encrypted with TLS 1.2, Acked):
From: <n***y@deutschebahn.com> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-21 17:55:02 - 17:55:08 (mailgate.tech.deutschebahn.com/mailgate.tech.deutschebahn.com/81.200.196.41/BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany -> Server 7, encrypted with TLS 1.2, Acked):
From: <n***y@deutschebahn.com> To: <nr@ut.lindenberg.one> Spf:Pass Signatures:Dkim
Analysis Sending of Email
Your mailserver does not use SNI, hence does not support RFC 7672 nor RFC 8461, and likely accepts any certificate when sending (bad).
Your mailserver was sending a mail (FROM/RCPT/DATA) without using STARTTLS first. Even though it may support RFC 7672 or RFC 8461, it does not enforce encryption (bad, but kind of normal).
Some mails were considered spam and rejected rather than accepted.
Analysis Reception of Email
| Mail Server (Preference) | Address(es) | Root Certificate Issuer | DNSSEC | STARTTLS | TLS Version | Certificate | Matches TLSA | MTA-STS | |
| deutschebahn-com.mail.protection.outlook.com (10) | 104.47.51.138, 104.47.51.202 | DigiCert Global Root CA | — | Success | 1.2/1.3 | Trusted | None | Ok | |
| ✗ | Qualified Transport Encryption | ✗ | ✓ | ✓ | |||||
| ✗ | RFC 7672 SMTP-DANE | ✗ | ✓ | ✓ | ✗ | ||||
| ✓ | RFC 8461 MTA-STS | ✓ | ✓ | ✓ | ✓ | ||||
| Summary | ✗ | ✓ | ✓ | ✓ | ✗ | ✓ | |||
| Networks | |||||||||
| BAHN-NET, Deutsche Bahn AG / DB Systel GmbH (German Railway), Germany : 81.200.196.41 | |||||||||
| MSFT, Microsoft Corporation, United States : 104.47.51.138, 104.47.51.202 | |||||||||